Learning Splunk - Using Fields

The video tutorial covers the use of fields in Splunk, including selected, interesting, and all fields. It explains how to adjust time ranges for searches, the impact of real-time searches on CPU usage, and how to filter search results using the timeline. The tutorial also discusses field types, case sensitivity, and advanced filtering techniques. Additionally, it demonstrates the use of CIDR notation and wildcards for efficient searching.

What are the default fields that exist for every event in Splunk?

What is the purpose of the time range picker in Splunk?

Why should real-time searches be avoided whenever possible in Splunk?

How can you add a term to a search in Splunk?

How can you filter results based on a specific time frame in Splunk?

Explain the difference between selected fields and interesting fields in Splunk.

Describe how case sensitivity affects field searches in Splunk.

What should you do if you are unsure about what fields are available in your data?

What is cider notation and how is it used in Splunk?

What are the implications of using wildcards in searches within Splunk?